Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/4C30F356A42511EBA9C0C16FF8AEA228.roa
File:                     4C30F356A42511EBA9C0C16FF8AEA228.roa (download)
Hash identifier:          +r1vFZ4wLR/R9jZwfztH3ARVY+o8bHcYX/dgE1HC2D0=
Subject key identifier:   77:F2:7B:1C:AC:95:6D:D9:FF:A0:8F:B3:DC:A2:0A:D8:B6:98:4E:B6
Certificate issuer:       /CN=F3690793AF/serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
Certificate serial:       04
Authority key identifier: 5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/4C30F356A42511EBA9C0C16FF8AEA228.roa
ROA valid until:          Apr 30 11:16:00 2030 GMT
asID:                     328839
IP address blocks:
    1: 2c0f:4600::/32 maxlen: 32

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690793AF/serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
        Validity
            Not Before: Apr 23 11:16:00 2021 GMT
            Not After : Apr 30 11:16:00 2030 GMT
        Subject: CN=6082ac76-c32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2b:51:2d:ad:1d:80:09:71:d5:79:0f:4e:e7:
                    43:6d:18:ac:56:54:f8:02:77:99:a4:ac:be:9b:38:
                    cc:c7:9f:45:a9:e9:9c:55:f4:15:3c:d9:37:5c:cd:
                    4d:3a:c5:31:3d:0b:b1:46:73:e6:7b:a5:aa:65:aa:
                    ad:f4:b8:73:dc:c6:b3:61:de:90:a2:1a:6c:ae:44:
                    27:6e:37:85:5b:ae:21:ab:09:3e:e7:8d:cc:76:84:
                    92:b8:e1:e2:66:ad:ee:a5:0d:ae:ea:6f:db:55:27:
                    fc:31:95:12:c6:0a:95:ec:ac:2b:bd:6c:31:3f:03:
                    16:b9:43:29:37:06:d9:e5:de:cf:74:7b:f5:67:0d:
                    23:54:79:f7:e9:5f:ea:d0:9e:fd:80:ea:5c:7c:b4:
                    da:90:d5:ce:b9:5f:92:4b:8b:5d:25:3f:53:5e:6f:
                    51:e5:fa:c3:ee:ea:ce:43:86:66:a8:65:69:78:a1:
                    d1:4d:0c:4d:0d:15:e2:7a:a0:bf:11:e8:cf:3b:ee:
                    2a:88:96:8c:50:75:cd:c0:73:ca:c6:2d:23:8c:e6:
                    01:67:9c:5d:c6:89:85:c6:b6:cb:7c:0b:7b:b7:73:
                    5e:56:9d:8d:43:c9:08:48:51:2b:f7:eb:c6:7b:bf:
                    c4:7e:ea:d8:3c:83:1d:d0:49:f1:77:ad:2f:c6:47:
                    2e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                77:F2:7B:1C:AC:95:6D:D9:FF:A0:8F:B3:DC:A2:0A:D8:B6:98:4E:B6
            X509v3 Authority Key Identifier: 
                keyid:5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/4C30F356A42511EBA9C0C16FF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:4600::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:e0:57:f9:29:ff:a7:eb:d9:d9:a6:a5:bc:26:b4:e9:e0:54:
         9e:79:de:96:df:7b:ff:0c:37:85:4f:9a:21:e1:49:fc:6e:e8:
         72:d4:3a:a1:40:68:1e:63:3d:23:e0:2f:b5:ac:97:51:61:1f:
         3c:f5:9d:08:a6:6c:cb:81:e9:c0:07:cb:70:67:91:fc:04:a6:
         ae:43:1b:f9:85:69:6b:65:a3:66:2b:4d:82:8e:ea:00:9c:50:
         22:b6:b0:82:80:ff:6c:4a:6e:11:e5:f7:2b:94:f4:8d:1c:3e:
         44:20:44:2b:a7:d2:a0:08:41:dc:6c:64:42:92:94:f2:3a:92:
         70:1a:59:af:6d:df:33:13:32:b1:5f:56:9f:c6:68:8a:54:4b:
         b8:c8:0c:46:bf:4c:0b:bd:fd:d2:53:7e:34:34:8a:d8:fc:08:
         79:be:98:10:04:a4:c4:e5:2b:2c:88:98:cc:58:49:7d:a1:95:
         32:e3:55:c2:c3:a9:69:49:31:8e:6f:6c:89:0a:7d:f1:8e:3f:
         e9:9a:02:62:0f:27:bd:d3:06:2f:e5:2f:79:7d:08:20:57:22:
         9f:09:fa:f3:b2:dd:39:4c:01:74:6d:f5:58:7c:15:da:97:b9:
         fe:7c:51:48:31:23:34:30:f1:1b:96:b6:04:8b:40:88:81:85:
         57:8d:04:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 07:15:39 2022 by rpki-client.